STIGUI
V-216329CAT II — Medium severitySV-216329r1016274_rule

The system must require passwords to contain at least one numeric character.

Rule version SOL-11.1-040090 · STIG v3 · 2026-08-19

Discussion

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check

Check the MINDIGIT setting.

# grep ^MINDIGIT /etc/default/passwd

If the MINDIGIT setting is less than 1, this is a finding.

Fix

The root role is required. # pfedit /etc/default/passwd

Locate the line containing:

MINDIGIT

Change the line to read:

MINDIGIT=1

Identifiers

Group ID
V-216329
Group title
SRG-OS-000071
Rule ID
SV-216329r1016274_rule
Check ID
C-17565r371075_chk
Fix ID
F-17563r371076_fix